authorizer moved
local authorizer for tests